Users are hardly ever implicitly dependable. Every time a user tries to obtain a useful resource, they must be authenticated and licensed, irrespective of whether they're already on the business network. Authenticated customers are granted least-privilege accessibility only, and their permissions are revoked when their endeavor is done. Use https://www.researchgate.net/publication/365308473_Development_of_Cyber_Attack_Model_for_Private_Network